Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD27E4684F611EE998053504AD9E6FC.roa
File:                     6BD27E4684F611EE998053504AD9E6FC.roa (raw, json)
Hash identifier:          X8cymPkY6bNHDIc9O/fd0/h5dBkJKw0FHPaLTbH3VzE=
Subject key identifier:   7B:2F:AD:23:D1:3D:2B:BE:E4:76:4C:43:92:22:2E:98:D7:76:E7:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5063
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD27E4684F611EE998053504AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:07:20 +0000
ROA not before:           Fri 17 Nov 2023 03:07:17 +0000
ROA not after:            Tue 12 Nov 2024 03:07:17 +0000
asID:                     54252
IP address blocks:        154.201.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20579 (0x5063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 03:07:17 2023 GMT
            Not After : Nov 12 03:07:17 2024 GMT
        Subject: CN=6556d8e8-e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fc:0d:f2:da:81:85:6a:3c:be:38:f1:29:06:
                    42:35:d5:c2:2d:0c:d0:3d:aa:7e:35:9a:7b:40:a3:
                    9a:d3:6b:0c:1e:90:43:c8:68:a9:be:43:7e:df:18:
                    ec:af:84:ba:01:75:79:d0:8e:27:bc:cf:b2:1d:85:
                    77:7d:6d:ae:00:1d:e2:83:e4:84:4a:0d:fc:f0:1c:
                    5e:03:73:88:63:a7:c0:58:63:80:48:5d:b0:9f:04:
                    a6:b8:74:8d:2a:6b:1e:f6:40:6d:0c:ba:d2:19:c0:
                    77:b3:d7:63:0b:c2:88:68:ef:43:3a:9e:47:8a:54:
                    46:ae:ec:e7:31:c1:54:60:86:93:a6:9b:53:01:6a:
                    2c:96:8c:c8:6c:e9:f7:da:a5:37:79:cf:a3:54:ee:
                    a2:3a:8e:ff:10:ff:f3:b9:7f:2d:e4:4d:d5:b7:0e:
                    45:15:04:ba:db:e3:ea:bd:09:1f:c7:25:a7:94:d4:
                    10:aa:c6:8e:32:89:90:a0:d2:41:18:93:a5:00:7c:
                    34:a4:1d:d4:d1:80:57:c5:53:2d:4c:11:1c:35:e8:
                    0f:61:bc:24:20:9e:d8:2e:20:4d:55:9b:78:0f:be:
                    18:ac:2a:dc:dd:c3:0a:f8:8a:75:d3:14:35:6f:ca:
                    19:e5:5b:f9:1e:69:6a:27:8a:24:16:61:35:a1:1f:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2F:AD:23:D1:3D:2B:BE:E4:76:4C:43:92:22:2E:98:D7:76:E7:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD27E4684F611EE998053504AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:c6:3f:a5:1a:71:f6:56:98:67:cb:af:a0:db:ee:f3:79:
         07:72:3b:5c:66:78:4b:0e:a3:ca:f0:29:7b:9e:f0:89:eb:56:
         02:88:29:5f:e2:1f:fa:6c:05:a5:9a:94:a6:22:98:9c:5f:08:
         16:75:76:68:c8:37:ee:d2:10:2a:59:f8:a0:02:d8:42:49:58:
         03:b7:17:84:f7:94:b4:d9:e1:b7:ee:18:7f:97:e9:85:4c:50:
         40:8a:89:71:fd:db:6e:96:4f:6b:21:c2:b4:7a:97:88:ed:b0:
         9e:4f:9a:6a:b7:f1:f1:2a:8a:04:7e:53:55:dd:1c:ea:03:ae:
         8c:48:8d:74:b6:e2:0d:ce:6f:ff:9b:6d:b7:8f:ed:f8:7d:2a:
         db:2a:03:0f:3d:69:6a:84:91:39:83:a9:d2:6b:3f:5e:f5:4f:
         6b:79:91:0f:db:dc:9e:6f:01:74:8d:06:75:c2:4d:42:dd:9a:
         cb:d1:b3:f2:10:6c:d5:ad:f1:14:c4:ef:95:3a:13:03:0a:ff:
         dd:79:7a:de:a0:ac:df:b7:55:8c:68:cf:fe:85:85:e4:21:43:
         8b:66:db:18:91:b0:dd:6c:b3:40:d3:e7:6f:66:b6:c7:5e:1b:
         2a:86:b3:e4:b5:ff:0f:07:51:2f:94:67:6c:61:c0:c8:61:f0:
         7d:35:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org